Tag: devops

Cockpit is the modern systemd-native Linux admin panel. Webmin is the veteran that configures everything. Here's which one should be on your servers, and which shouldn't.

You're pulling container images from strangers on the internet. Trivy scans them for CVEs. Cosign proves they haven't been tampered with. Use both.

Prometheus scrapes metrics. Grafana makes them pretty. Alertmanager wakes you up at 2 AM. Here's how to wire all three together into a monitoring stack that actually works.

GitLab CE does everything and wants all your RAM. Gitea and Forgejo run on a Raspberry Pi. Here's which self-hosted git platform actually fits your setup.

Docker networking confuses everyone at first. Here's the practical breakdown of bridge, host, overlay, and macvlan, with real Compose examples.

Cloudflare rebuilt WordPress from scratch in TypeScript using AI agents. Sandboxed plugins, Astro themes, self-hostable. It's called EmDash and it's actually interesting.

JSON mode forces a model to return valid JSON, which helps extraction and hurts reasoning. When to use it, when it degrades output, and a hybrid approach.

You committed .env.production once. Your database credentials are in git forever. Here's how to use dotenv without shooting yourself.

Claude Code found a Linux vulnerability hidden for 23 years. You can use the same AI code auditing approach to find bugs in your own projects before attackers do.

Stop letting Docker Hub throttle your CI/CD. Run Harbor for RBAC, Trivy scanning, image replication, and a real UI, on infrastructure you control.

You get 50 alerts a day and ignore all of them. That's not monitoring, that's noise. Here's how to build alerts people actually care about.

Portainer, Dockge, and Dockhand compared side by side. Portainer handles fleets, Dockge nails single-host Compose, Dockhand gives you multi-host and SSO free.